Oracle has—finally—admitted it was hacked and customer log-in credentials stolent, despite repeatedly denying such a hack previously.

A hacker claimed in March to have hacked Oracle and stolen authentication information and encrypted passwords, post samples online for verification. Oracle vehemently denied the claim.

“There has been no breach of Oracle Cloud. The published credentials are not for the Oracle Cloud. No Oracle Cloud customers experienced a breach or lost any data,” the company told BleepingComputer at the time.

Despite the denial, Oracle customers confirmed the data was real. Now, weeks later, Oracle is finally admitting it was hacked and the data was stolen. According to Bloomberg News, the company is notifying customers, but telling them the stolen data is old data from a “legacy environment.”

Unfortunately for Oracle, this is the second breach Oracle has experienced over the last couple of months, with Bloomberg reporting the company suffered a breach that saw hackers steal healthcare patient data after January 22.

The hacks are an embarrassment for Oracle at a time when the company is positioning itself as a more secure alternative to its larger cloud rivals, as well as a partner of the US government with its Stargate AI program. In both cases, security is paramount, but Oracle suffering two breaches in as many months is a significant setback for the company.